Dependency Review

Scanned Files

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Greptile Summary

This PR fixes a legitimate GoReleaser version typo (v2.11.3 → v2.14.3) that was causing the CLI release job to fail with a 404. However, the same version string was also changed for golangci-lint (a completely separate project), which is not mentioned in the PR description and introduces its own risk.

• GoReleaser fix (line 280): Correct and well-explained — GoReleaser never released v2.11.3, and the CLI release job was failing as a result.
• golangci-lint version bump (line 69): Undocumented side effect. golangci-lint and goreleaser have independent release histories. If golangci-lint v2.14.3 does not exist, the cli-lint job will fail with the same 404 error pattern. If it does exist but introduces stricter lint rules, it could break the lint job on otherwise valid code. This change should be explicitly verified and documented.

Confidence Score: 3/5

• Safe to merge once the golangci-lint v2.14.3 version is confirmed to exist and the lint job is verified to pass.
• The GoReleaser fix is correct and necessary. The concern is the unverified, undocumented change to the golangci-lint binary version — if that version doesn't exist or introduces breaking lint rules, it swaps one 404 failure for another, or silently breaks the lint gate.
• .github/workflows/cli.yml line 69 — confirm golangci-lint v2.14.3 is a valid release before merging.

Important Files Changed

This is a comment left during a code review.
Path: .github/workflows/cli.yml
Line: 69

Comment:
**Undocumented golangci-lint version bump**

This line changes the `golangci-lint` binary version from `v2.11.3` to `v2.14.3`, but the PR description only discusses the GoReleaser version fix. These are two entirely separate tools with independent release histories — the fact that GoReleaser never released `v2.11.3` does not imply the same about `golangci-lint`.

A few concerns here:

1. **If `golangci-lint v2.11.3` existed and was working**, this is a silent upgrade to `v2.14.3`. A newer major version of golangci-lint can introduce new or stricter lint rules that break the `cli-lint` job on code that previously passed.
2. **If `golangci-lint v2.14.3` does not exist**, the `cli-lint` job will fail with a 404 — the same failure mode this PR is trying to fix for GoReleaser.

Please verify:
- That `golangci-lint v2.14.3` exists in the [golangci-lint releases](https://github.com/golangci/golangci-lint/releases).
- That the lint job passes locally (or via CI) with this version before merging.

If the intent is just to fix the GoReleaser typo, this line should be reverted back to `v2.11.3` (or whatever the last known-good `golangci-lint` version was) to keep this PR scoped.

How can I resolve this? If you propose a fix, please make it concise.

_{Last reviewed commit: 55fa36c}